Skip to main content
complior scan [path] [flags]

​
Flags

FlagDescriptionDefault
--deepTier 2: external tools (Semgrep, Bandit, ModelScan)off
--llmL5: LLM deep analysis (requires BYOK key)off
--cloudTier 3: cloud SBOM + PII + vendor assessmentoff
--ciCI mode: exit code 0/1 based on thresholdoff
--jsonOutput as JSONoff
--sarifOutput as SARIF v2.1.0off
--threshold <N>Score threshold for CI pass50
--fail-on <SEV>Fail on severity: critical, high, medium, low—
--diff <BRANCH>Compare against base branch—
--fail-on-regressionExit 1 on score regression or new critical findingsoff
--commentPost diff as PR comment (requires gh CLI)off
-q, --quietShow only critical findings and scoreoff
--agent <NAME>Filter scan by agent nameall
--no-tuiForce headless outputauto

​
Examples

complior scan

​
GitHub Actions

- name: Compliance scan
  run: |
    npx complior scan --ci --threshold 70 --fail-on critical --sarif > results.sarif

- name: Upload SARIF
  uses: github/codeql-action/upload-sarif@v3
  with:
    sarif_file: results.sarif

​
Output formats

FormatFlagUse case
Terminal(default)Human-readable with colors
JSON--jsonProgrammatic processing, CI/CD
SARIF--sarifGitHub Code Scanning, VS Code

​
Exit codes (CI mode)

CodeMeaning
0Score >= threshold, no critical findings
1Score < threshold or critical finding detected